This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer File: tj8U3_NUhamVlBKGMDe4XfqfE9g.cer (raw, json) Hash identifier: yHg6f1BZ55G1Vc2icvrhHsqG/CrwA2OMqiKAHGdoogc= Subject key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E392ECE8A6207D1DA2A8326F92F5A22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215665 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2e:ce:8a:62:07:d1:da:2a:83:26:f9:2f:5a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b63f14dff35485a9959412863037b85dfa9f13d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:ff:07:86:c2:4d:89:e2:9a:ec:5f:61:aa: a5:51:b8:d9:47:30:95:70:c3:ae:10:a3:ab:51:34: 90:16:2a:74:f9:be:b0:11:fa:18:65:98:0d:de:e7: 7f:68:a1:c7:3e:73:a5:8c:35:79:b7:83:1f:e7:ff: d2:62:96:1f:e3:1e:37:56:6f:02:6e:9a:bf:6a:0d: a2:53:29:ab:a2:cf:e6:75:f0:69:7f:e4:5d:b5:7d: d6:e8:b8:85:1d:aa:5a:f2:7b:d4:22:12:85:12:31: bd:f5:ed:f3:75:68:ba:30:99:cb:2c:68:dd:af:2d: 22:d4:59:36:75:3b:09:42:5c:a2:94:72:02:b4:3d: da:fb:58:38:16:a1:fa:4a:19:b2:9d:89:b7:db:ad: 1d:59:a9:31:46:47:75:4d:06:0d:7b:5f:fd:bb:35: ae:49:de:b7:75:93:32:54:5e:ed:e3:7e:31:70:d9: 65:f5:53:ce:0a:db:3b:f0:11:e3:0a:54:8d:bc:2a: 40:c7:34:52:56:5f:c1:6c:f0:0c:23:ca:59:7b:28: 18:b0:6d:95:88:4b:12:59:12:98:fe:5f:ee:e1:c7: 39:3b:6b:4c:d9:69:01:7f:e2:b2:f1:31:8a:07:0c: e0:0d:2e:0a:75:39:e2:8f:ba:98:5d:83:02:2a:ed: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215665 Signature Algorithm: sha256WithRSAEncryption 61:8e:0d:b3:de:0e:6a:b8:e7:a2:53:56:47:e1:ac:40:63:db: ef:ac:ae:70:85:ba:69:b6:23:59:9b:72:87:b9:8f:8d:fe:d1: 75:18:23:b3:e5:e7:d5:73:fb:1e:1c:36:3e:f7:39:74:0f:9e: 0e:67:e6:57:db:db:53:eb:e8:76:33:a0:b9:5a:e0:25:7b:32: 9b:32:bc:4c:43:bf:cb:43:6a:78:46:12:60:19:a5:e0:95:d5: 03:8f:86:4f:db:50:ba:8b:2e:6a:1a:9a:20:a8:cd:38:7e:c1: 33:c2:42:ae:5f:36:cf:3d:97:49:12:f1:52:df:83:1b:d3:08: ff:66:3d:05:5d:8d:fb:99:79:8b:a3:f1:5f:7a:e2:92:4b:c4: a9:e2:ee:42:09:6a:49:58:0b:34:08:ba:1e:8d:d1:83:b4:ca: 5c:c6:11:21:6b:30:e0:77:e1:36:21:f0:d5:70:c1:08:eb:64: 01:65:bc:e5:f3:c4:1d:05:0e:06:3c:f8:e5:f4:1e:84:eb:26: 08:88:ca:ae:f7:69:8d:dd:84:eb:a2:d0:d8:8f:f3:e8:14:cc: 78:91:5d:34:1c:6c:fa:63:3f:61:30:47:31:aa:68:dc:c9:e5: fb:17:e8:47:31:87:9c:29:3c:78:b6:a5:41:ef:d4:df:b7:fc: 53:8b:ed:d6 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OS7OimIH0doqgyb5L1oiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjNmMTRkZmYzNTQ4NWE5OTU5NDEyODYzMDM3Yjg1ZGZhOWYxM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksD/B4bCTYnimuxfYaqlUbjZRzCV cMOuEKOrUTSQFip0+b6wEfoYZZgN3ud/aKHHPnOljDV5t4Mf5//SYpYf4x43Vm8C bpq/ag2iUymros/mdfBpf+RdtX3W6LiFHapa8nvUIhKFEjG99e3zdWi6MJnLLGjd ry0i1Fk2dTsJQlyilHICtD3a+1g4FqH6ShmynYm3260dWakxRkd1TQYNe1/9uzWu Sd63dZMyVF7t434xcNll9VPOCts78BHjClSNvCpAxzRSVl/BbPAMI8pZeygYsG2V iEsSWRKY/l/u4cc5O2tM2WkBf+Ky8TGKBwzgDS4KdTnij7qYXYMCKu06qwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLY/FN/zVIWplZQShjA3uF36nxPYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzNiYzg2 NS0zODZiLTRiZWEtYWJhMC02NmM5OGMwMWRmZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvM2JjODY1 LTM4NmItNGJlYS1hYmEwLTY2Yzk4YzAxZGZkNy8xL3RqOFUzX05VaGFtVmxCS0dN RGU0WGZxZkU5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKcTANBgkqhkiG9w0BAQsFAAOCAQEAYY4Ns94Oarjn olNWR+GsQGPb76yucIW6abYjWZtyh7mPjf7RdRgjs+Xn1XP7Hhw2Pvc5dA+eDmfm V9vbU+vodjOguVrgJXsymzK8TEO/y0NqeEYSYBml4JXVA4+GT9tQuosuahqaIKjN OH7BM8JCrl82zz2XSRLxUt+DG9MI/2Y9BV2N+5l5i6PxX3rikkvEqeLuQglqSVgL NAi6Ho3Rg7TKXMYRIWsw4HfhNiHw1XDBCOtkAWW85fPEHQUOBjz45fQehOsmCIjK rvdpjd2E66LQ2I/z6BTMeJFdNBxs+mM/YTBHMapo3Mnl+xfoRzGHnCk8eLalQe/U 37f8U4vt1g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:08 2026 by rpki-client